Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232362e302f32342d3234203d3e20323634323038.roa
File:                     3133382e39372e3232362e302f32342d3234203d3e20323634323038.roa (raw, json)
Hash identifier:          wqiMdlFDcRttbfe4gFFLBuSHHCh+mG4gW7+8lJtJ0J8=
Subject key identifier:   25:10:1F:C8:D3:63:2C:2D:54:9C:97:00:0C:2E:EC:E8:E4:C1:95:F9
Certificate issuer:       /CN=CA230167CDE901C71120C1F72B8414F772B2EDD7
Certificate serial:       592216B30BB7A9E24451653E545C100FC22BD385
Authority key identifier: CA:23:01:67:CD:E9:01:C7:11:20:C1:F7:2B:84:14:F7:72:B2:ED:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232362e302f32342d3234203d3e20323634323038.roa
Signing time:             Sat 30 Mar 2024 00:41:05 +0000
ROA not before:           Sat 30 Mar 2024 00:36:05 +0000
ROA not after:            Sat 29 Mar 2025 00:41:05 +0000
asID:                     264208
IP address blocks:        138.97.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:22:16:b3:0b:b7:a9:e2:44:51:65:3e:54:5c:10:0f:c2:2b:d3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA230167CDE901C71120C1F72B8414F772B2EDD7
        Validity
            Not Before: Mar 30 00:36:05 2024 GMT
            Not After : Mar 29 00:41:05 2025 GMT
        Subject: CN=25101FC8D3632C2D549C97000C2EECE8E4C195F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:18:6b:2a:06:bb:c5:d0:ef:0b:e7:7c:fe:63:
                    68:a4:21:bc:be:b0:f1:c0:02:8a:86:70:d3:18:64:
                    ee:0d:11:0c:2b:a2:d0:bc:57:a2:fd:27:1c:2b:5e:
                    ad:3c:af:3b:5a:93:27:53:cc:a2:8c:8b:68:58:ae:
                    32:6f:3b:89:34:6d:2b:f7:fc:27:d0:02:02:38:77:
                    fb:cf:89:8e:0b:9a:40:5a:1e:ca:0f:4d:b0:1f:5e:
                    13:4c:0d:c1:83:cf:1a:17:90:24:35:08:11:25:fe:
                    d8:f8:6e:d5:e9:9e:5c:48:fe:27:a4:3f:64:d2:de:
                    33:b2:a2:43:27:5d:78:de:bd:be:5d:52:35:ef:ef:
                    bf:9b:3d:e8:53:4e:ea:8e:22:9b:29:8f:e9:c4:df:
                    3f:01:eb:5f:b2:12:cf:f5:fb:2a:99:be:35:6f:38:
                    48:93:0c:de:c4:4b:44:d7:f0:85:c1:81:55:7d:57:
                    9c:17:bb:20:d0:12:f0:34:b9:1f:52:1d:f9:29:74:
                    5f:c3:90:5e:51:1d:70:5a:fb:57:5d:31:0d:56:dc:
                    dd:21:1c:2c:82:a3:d3:96:4e:5b:25:56:50:52:8b:
                    40:a3:3f:d4:84:09:d8:02:f5:c7:64:2e:fa:09:58:
                    29:da:c4:00:74:b8:bf:56:b6:3a:ae:18:91:f0:de:
                    2a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:10:1F:C8:D3:63:2C:2D:54:9C:97:00:0C:2E:EC:E8:E4:C1:95:F9
            X509v3 Authority Key Identifier:
                keyid:CA:23:01:67:CD:E9:01:C7:11:20:C1:F7:2B:84:14:F7:72:B2:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232362e302f32342d3234203d3e20323634323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:56:1c:f4:6e:2d:2b:43:45:56:a7:36:00:49:f5:0c:90:b1:
         24:00:c8:f7:31:85:1e:2d:98:f4:8b:7b:2a:91:75:be:49:75:
         9a:10:ca:90:e4:73:e2:1a:ab:5f:ae:ee:62:cf:ad:93:77:9f:
         a4:11:3d:77:c8:b4:a9:d2:de:58:87:da:6e:2d:e4:f6:c7:a9:
         1d:89:1d:88:29:06:40:bd:72:1c:fa:42:39:ae:ac:20:a0:50:
         26:d1:6d:62:dd:1c:5a:1e:11:fe:ad:a8:b9:5b:50:63:19:b0:
         2f:0c:03:a2:bf:bb:ea:a4:ef:a1:36:c8:57:bb:0d:3d:d2:6f:
         f8:cb:97:5e:46:09:68:bc:0e:47:a5:d5:0e:ec:b2:40:19:a5:
         c3:53:45:90:9e:65:1c:3d:e3:4e:15:9e:4e:ef:e4:c2:9e:2a:
         44:3b:14:15:ae:81:68:43:71:bb:bc:32:73:bf:6c:f8:63:39:
         3e:a1:d4:f3:e5:2a:bf:94:db:13:22:33:fc:61:48:89:f2:5d:
         8b:d3:cf:90:77:d3:d2:f4:70:31:04:49:8b:86:4f:3e:14:af:
         22:4c:6c:fa:1c:6e:22:31:c0:7c:16:65:32:1f:77:51:db:12:
         60:88:06:34:6a:34:7f:be:30:3a:61:87:51:45:cf:68:d9:fb:
         61:fa:80:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org